HTB Forest CTF Writeup This assessment on HTB Forest CTF aimed to evaluate the security posture of the Active Directory (AD) environment and associated infrastructure. During the evaluation, several vulnerabilities were identified, ranging from information disclosure and initial access to domain takeover. These issues highlight weaknesses in access control, account configurations, and privilege management. Addressing […]
HTB Headless CTF Writeup This comprehensive document unveils a range of vulnerabilities from medium to extreme severity within the HTB Headless CTF environment. Fig. 01: HTB Headless CTF banner image Executive Summary Overview The pentest conducted on the Headless CTF platform has uncovered multiple critical security vulnerabilities. These vulnerabilities span from blind Cross-Site Scripting (XSS)
Devel CTF Writeup This is a writeup presented by Behind Security as part of the Road to OSCP series, focusing on the Devel CTF from HackTheBox. Devel CTF Devel, while relatively simple, demonstrates the security risks associated with some default program configurations. It is a beginner-level machine which can be completed using publicly available exploits.
Netmon CTF Writeup This is a writeup presented by Behind Security as part of the Road to OSCP series, focusing on the Netmon CTF from HackTheBox. The writeup takes the form of a pentest report. Netmon CTF Netmon is an easy difficulty Windows box with simple enumeration and exploitation. PRTG is running, and an FTP
Optimum CTF Writeup This is a writeup presented by Behind Security as part of the Road to OSCP series, focusing on the Optimum CTF from HackTheBox. The writeup takes the form of a pentest report. Optimum CTF Optimum is a beginner-level machine which mainly focuses on enumeration of services with known exploits. HackTheBox Hack The
Sunday CTF: My Great Vacation This is a writeup presented by Behind Security as part of the Road to OSCP series, focusing on the Sunday CTF from HackTheBox. The writeup takes the form of a detailed pentest report. Sunday CTF Sunday CTF is a fairly simple machine, however it uses fairly old software and can be
Exploring Blocky CTF: An Attack Vector on Minecraft This is a writeup presented by Behind Security as part of the OSCP Roadmap series, focusing on the Blocky CTF from HackTheBox. The writeup takes the form of a detailed pentest report. Blocky CTF This challenge showcases the dangers of poor password practices and the exposure of
An Attack Vector on Minecraft: Exploring Blocky CTF Read More »
Hands-On Windows SMB Exploitation: Unleashing the Legacy CTF Challenge Legacy Legacy is a fairly straightforward beginner-level machine which demonstrates the potential security risks of SMB on Windows. HackTheBox Hack The Box gives individuals, businesses and universities the tools they need to continuously improve their cybersecurity capabilities — all in one place. BEHIND SECURITY Behind Security
Hands-On Windows SMB Exploitation: Unleashing the Legacy CTF Challenge Read More »
Exploring Eternal Blue! A writeup by Behind Security on a challenge named Blue from HackTheBox. You can see a informative dashboard below. Blue Challenge that covers enumeration and exploitation of a windows machine running a vulnerable SMB server. HackTheBox Hack The Box gives individuals, businesses and universities the tools they need to continuously improve their
